release: prepare v0.0.1-rc.4

packaging/aur/README.md

@@ -1,17 +1,22 @@
 # AUR Packaging
 
-This directory contains AUR package sources for:
-- `openbitdo-bin` (prebuilt release assets)
+This directory holds the tracked AUR source for `openbitdo-bin`.
 
-Publishing is automated by `.github/workflows/aur-publish.yml` and remains gated:
-- requires repository variable `AUR_PUBLISH_ENABLED=1`
-- requires secrets `AUR_SSH_PRIVATE_KEY` and `AUR_USERNAME`
+## Source Of Truth
 
-Publish flow:
-1. wait for release assets from a `v*` tag
-2. compute authoritative SHA256 values from released artifacts
-3. render `PKGBUILD`/`.SRCINFO` with pinned hashes
-4. push updates to AUR repo
+- tracked metadata: `packaging/aur/openbitdo-bin/PKGBUILD` and `.SRCINFO`
+- template: `packaging/aur/openbitdo-bin/PKGBUILD.tmpl`
+- renderer: `packaging/scripts/render_release_metadata.sh`
 
-Template files used for release rendering:
-- `openbitdo-bin/PKGBUILD.tmpl`
+## Publish Flow
+
+1. Publish GitHub release assets for a `v*` tag.
+2. Render `PKGBUILD` and `.SRCINFO` from those assets.
+3. Upload rendered metadata as a workflow artifact for audit.
+4. Push the updated metadata to the AUR repo for `openbitdo-bin`.
+
+## Required Controls
+
+- repo variable `AUR_PUBLISH_ENABLED=1`
+- secrets `AUR_USERNAME` and `AUR_SSH_PRIVATE_KEY`
+- no placeholder checksums in published metadata

packaging/aur/openbitdo-bin/.SRCINFO

@@ -1,15 +1,15 @@
 pkgbase = openbitdo-bin
 	pkgdesc = Prebuilt beginner-first clean-room 8BitDo utility
-	pkgver = 0.0.1rc1
+	pkgver = 0.0.1rc3
 	pkgrel = 1
 	url = https://github.com/bybrooklyn/openbitdo
 	arch = x86_64
 	arch = aarch64
 	license = BSD-3-Clause
 	depends = hidapi
-	source_x86_64 = openbitdo-v0.0.1-rc.1-linux-x86_64.tar.gz::https://github.com/bybrooklyn/openbitdo/releases/download/v0.0.1-rc.1/openbitdo-v0.0.1-rc.1-linux-x86_64.tar.gz
-	sha256sums_x86_64 = 0000000000000000000000000000000000000000000000000000000000000000
-	source_aarch64 = openbitdo-v0.0.1-rc.1-linux-aarch64.tar.gz::https://github.com/bybrooklyn/openbitdo/releases/download/v0.0.1-rc.1/openbitdo-v0.0.1-rc.1-linux-aarch64.tar.gz
-	sha256sums_aarch64 = 0000000000000000000000000000000000000000000000000000000000000000
+	source_x86_64 = openbitdo-v0.0.1-rc.3-linux-x86_64.tar.gz::https://github.com/bybrooklyn/openbitdo/releases/download/v0.0.1-rc.3/openbitdo-v0.0.1-rc.3-linux-x86_64.tar.gz
+	sha256sums_x86_64 = fa7ae583796dc979a64eaeb670a06fc7c10fd51bbb12fce5815d66629e18c9a0
+	source_aarch64 = openbitdo-v0.0.1-rc.3-linux-aarch64.tar.gz::https://github.com/bybrooklyn/openbitdo/releases/download/v0.0.1-rc.3/openbitdo-v0.0.1-rc.3-linux-aarch64.tar.gz
+	sha256sums_aarch64 = 992586ff89da6dfdb137fd424f651ccedb4a65de0f43d615cda682e31e222dd0
 
 pkgname = openbitdo-bin

packaging/aur/openbitdo-bin/PKGBUILD

@@ -1,16 +1,16 @@
 pkgname=openbitdo-bin
-pkgver=0.0.1rc1
-_upstream_tag=v0.0.1-rc.1
+pkgver=0.0.1rc3
+_upstream_tag=v0.0.1-rc.3
 pkgrel=1
-pkgdesc="Prebuilt beginner-first clean-room 8BitDo utility"
+pkgdesc="Open source 8BitDo utility"
 arch=('x86_64' 'aarch64')
 url="https://github.com/bybrooklyn/openbitdo"
 license=('BSD-3-Clause')
 depends=('hidapi')
 source_x86_64=("openbitdo-${_upstream_tag}-linux-x86_64.tar.gz::${url}/releases/download/${_upstream_tag}/openbitdo-${_upstream_tag}-linux-x86_64.tar.gz")
 source_aarch64=("openbitdo-${_upstream_tag}-linux-aarch64.tar.gz::${url}/releases/download/${_upstream_tag}/openbitdo-${_upstream_tag}-linux-aarch64.tar.gz")
-sha256sums_x86_64=('0000000000000000000000000000000000000000000000000000000000000000')
-sha256sums_aarch64=('0000000000000000000000000000000000000000000000000000000000000000')
+sha256sums_x86_64=('fa7ae583796dc979a64eaeb670a06fc7c10fd51bbb12fce5815d66629e18c9a0')
+sha256sums_aarch64=('992586ff89da6dfdb137fd424f651ccedb4a65de0f43d615cda682e31e222dd0')
 
 package() {
   local extracted_dir